SUSE CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

AZL-109023 CVE-2026-98766 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

DEBIAN-CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

UBUNTU-CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766 usb: gadget: aspeed-vhub: cancel wake work on device removal

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

EUVD-2026-103851

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

The Linux kernel contains a use-after-free vulnerability in the usb: gadget: aspeed-vhub component. The root cause is that wake_work is armed during the .wakeup callback but is not cancelled in ast_vhub_remove(), potentially allowing a work item to execute after the vhub and its ports are freed b...

CVE-2026-98766 usb: gadget: aspeed-vhub: cancel wake work on device removal

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

CVE-2026-98766

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

PT-2026-128501

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wake work is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in ast vhub remove, so a work item queued before or...

PT-2026-116985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the aspeed-vhub gadget driver. The wake work item, which is armed via the gadget .wakeup callback to resume suspended downstream ports, is not cancelled...

Linux Distros Unpatched Vulnerability : CVE-2026-98766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is...

CVE-2026-98766: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wakework is armed from the gadget .wakeup callback to resume suspended downstream ports, and it is never cancelled in astvhubremove, so a work item queued before or...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fixed a reference count leak issue in astvhubinitdesc. We should call ofnodeput for the reference returned by ofgetchildbyname, which has increased the reference count...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992939)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992939 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in astvhubinitdesc We should call ofnodeput for the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992328 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in astvhubinitdesc We should call ofnodeput for the...

EUVD-2022-55405

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-50139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: aspeed-vhub: Fix refcount leak bug in astvhubinitdesc We should call ofnodeput for the...